Source: OJ L, 2025/295, 13.2.2025

Current language: EN

Article 5 Template for providing information on subcontracting arrangements


Summary What does Article 5 of the RTS on harmonisation for oversight conduct say?

This is a brief procedural article that governs how critical ICT third-party service providers must present information about their subcontracting arrangements to the Lead Overseer.

Rather than leaving the format open-ended, the article mandates the use of a specific template found in the Annex of the regulation.

It connects directly to the broader information-sharing obligations established in Article 2, providing a standardised mechanism for fulfilling those obligations in the context of subcontracting.

Important points:

  • Critical ICT third-party service providers required to share subcontracting information must submit it using the template set out in the Annex.
  • The obligation is limited in scope to subcontracting arrangements specifically, not all information requests from the Lead Overseer.
  • The Lead Overseer is the designated recipient of this information.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

A critical ICT third-party service provider which is required to share information on subcontracting arrangements shall provide the information to the Lead Overseer according to the template set out in the Annex.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod